[Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum retries exceeded on call

[AstGrp]

Ok.. After upgrading the PIX to version PIX6.3(3).  I can register the
phone, but I am having related issue of sorts... Here's the low down..
The outside interface of the PIX is doing PAT.  And I have one to one
NAT translation for the * Server... But if I configure everything this
way... I get an Unreachable... But if I put the PAT IP in for the NAT IP
in the SIP file, it registers fine, but then no sound is heard through
the phone....

Any ideas..

gcc

-----Original Message-----
From: asterisk-users-admin at lists.digium.com
[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of James
Sizemore
Posted At: Monday, March 15, 2004 5:24 PM
Posted To: Asterisk User Group
Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
retries exceeded on call
Subject: Re: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
retries exceeded on call


Some firewalls when doing nat will alter the return address (need to 
make nat work)
but not recalculate the header checksum,  (Sonic walls come to mind.), 
Linux  will
proply delete any tcp/udp packet that fails its checksum at the kernel 
level, and send
an error to the app.  If this is happening to you Asterisk should log 
some kind of error.


AstGrp wrote:

>Update...
>
>I did some more testing today.. And with the same setup but one box 
>behind a Linksys router and another box behind a Pix firewall.. The 
>linksys works with no problems... So it appears to be how the PIX is 
>handling NAT & SIP...  If any one has any thoughts on this , it would 
>be greatly appreciated.
>
>And thank you James for the support you have given today.
>
>Thanks,
>
>gcc
>
>-----Original Message-----
>From: asterisk-users-admin at lists.digium.com
>[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of AstGrp 
>Posted At: Friday, March 12, 2004 4:29 PM Posted To: Asterisk User 
>Group
>Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum 
>retries exceeded on call
>Subject: RE: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum 
>retries exceeded on call
>
>
>Do I need to associate the outside interface of the PIX with the phone 
>on the inside.. I don't remember doing this before...
>
>Setup ----
>
>* Server ---> PIX FW ---> WWW CLOUD ----> PIX FW ---> IP Phone
>
>Again the only difference than before is the First PIX FW.... Old setup

>was.... (Different server though)
>
>* Server ----> Linksys Router ----> WWW CLOUD ----> PIX FW ----> IP 
>Phone
>
>Any thoughts?
>
>-----Original Message-----
>From: asterisk-users-admin at lists.digium.com
>[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of James 
>Sizemore Posted At: Friday, March 12, 2004 2:58 PM Posted To: Asterisk 
>User Group
>Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum 
>retries exceeded on call
>Subject: Re: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum 
>retries exceeded on call
>
>
>The pings are pinging the out side port on the nat device,  You don't
>have a
>rule in your nat table to associate it with a device on the inside.
You
>
>should
>reset the phone and then see if the qualify shows a return time.  You 
>will need to make the phone register every time you change you config 
>till the qualify shows a time. A good way to do this is to reboot the 
>phone. Your nat device will have a default time that it keep nat rules 
>in its table.
>Your qualify time will need to be lower then this value.
>
>AstGrp wrote:
>
>  
>


_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users